CVE-2025-11401

SourceCodester Hotel and Lodge Management System 1.0 is affected by a SQL injection in the file /pages/save_curr.php via manipulation of the currcode parameter in an unknown function. The vulnerability enables remote exploitation, and public exploits have been published. Multiple sources corrobor...

CVE-2025-11401 SourceCodester Hotel and Lodge Management System save_curr.php sql injection

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /pages/savecurr.php. This manipulation of the argument currcode causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and ma...